Developer's Guide to Web Application Security

Summary

Web-based applications have many security problems associated with them. As men-

tioned in Chapter 1,“Hacking Methodology,” Web sites have been subjected to

many recent defacement attacks.This is just as severe a problem as destruction of

data, but the cause is often outside the realm of the programmer. Vulnerabilities in

the Web server program, or in other aspects of the underlying systems, can be just as

troublesome as poorly written software. Security must be handled in-depth. Not one

single element is the total cause of the problem, and not one single solution will

alleviate the risks.The Internet is a dangerous place, akin to the Amer